Zero-Knowledge Goof❄️

Following Ledger's supply chain infiltration with malicious implants, we've received many questions. Our supply chain: every Frostsnap is assembled and tested in our own factory, with our own hands. Orders purchased in our store are held and packed by us, with no third-party warehouse or outsourced fulfillment. The sealed package goes straight from us to the shipping carrier, who then takes it to your door. Distribution: every extra hand in the supply chain can add risk and educational challenges. But we have seen how buying internationally has real costs associated (shipping, duties, convenience), so we're taking great care with planning wider distribution. We'll share more on official distributors soon. The attack itself: there's no sugar coating it. Supply chain implants are incredibly difficult to defend against with system design and cryptography, and we believe no product today fully addresses this threat. Tamper resistant systems and other device properties are hard to reason about, and evil implant technology has years of improvement ahead of it. With Frostsnap, one compromised device can't spend your funds. An attacker needs enough devices to meet your threshold. That raises the bar a lot, but it doesn't help if a whole batch is compromised before it reaches you. While we work on increasing verifiability, don't lose sight of the big picture: bitcoin is still most often lost to complexity, a lack of redundancy, stolen by low hanging scams, or lost without an inheritance plan. Our goal has not changed: a hardware wallet that isn't a trusted third party. We've been ahead of the curve on not trusting a single device to generate its own entropy, and we're excited to pioneer defenses against supply chain implant threat.